CVE-2008-4601

Cross-site scripting XSS vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habariusername parameter...

CVE-2008-4601

The CVE-2008-4601 entry documents a Cross-Site Scripting (XSS) vulnerability in Habari CMS 0.5.1, exploitable via the habari_username parameter in the login feature. The issue allows remote attackers to cause arbitrary HTML/script execution in a user’s browser session of an affected site. The tec...